Canadians pay more often for ransomware attacks, and I'll try to explain why I suspect that is.There are a few key parts to a ransomware attack that I'm going to break down first: Initial access TTPs Ransom request Payouts 1) Initial access This is done via a number of ways called threat vectors. Phishing, social [...]
The Canadian Centre for Cyber Security (also known as Cyber Centre) is Canada’s technical authority on cyber security. Part of the Communications Security Establishment (CSE), they are a single unified source of expert advice, guidance, services and support on cyber security for Canadians and Canadian organizations. The Cyber Centre works in close collaboration with Government [...]
This is a summary of the document published by the Supply Chain Assurance Working Group (SCAWG), from the Canadian Forum for Digital Infrastructure Resilience (CFDIR). In June of 2022, version 0.1 of the document "Recommendations to Improve the Resilience of Canada’s Digital Supply Chain" was published here. This was created in response to the compromise [...]
Designing Risk in IT Infrastructure 